When a subdomain is configured to point to an external service that is no longer active but is still addressable via DNS, attackers can takeover this subdomain and use it for a variety of malicious purposes.